Project

General

Profile

Actions

Bug #72975

open

Epic #90674: Backend UI not reflecting permissions

If "Copy default content elements" fails because of missing CType access, images get duplicated

Added by Christoph Bessei about 8 years ago. Updated 9 days ago.

Status:
New
Priority:
Should have
Assignee:
-
Category:
DataHandler aka TCEmain
Target version:
-
Start date:
2016-01-27
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
6.2
PHP Version:
Tags:
Complexity:
medium
Is Regression:
No
Sprint Focus:

Description

There seems to be a bug with access restricted CTypes in 6.2.17:

1. Create content element with FAL image in default language

2. Try to translate the CE with an translator account who doesn't have
access to this CType (sadly the "Copy default content elment button"
still shows up)
I restrict the access with the "Explicitly allow/deny field values:"-option for a backend user group.

3. TYPO3 tries to create a translated CE but fails with "newlog()]
recordEditAccessInternals() check failed. [ERROR: authMode
"explicitAllow" failed for field "CType" with value..."

4. It's correct that TYPO3 throws this error, but it seems that this
happens too late. The FAL image got already copied and shows up as duplicate in the default language now

M.e the problem is in \TYPO3\CMS\Core\DataHandling\DataHandler->process_datamap().
The tables which need an update/new entries are processed one after
another and access check happens only for the current table.
So if an error occurs in the last table the already proccessed tables need some kind of rollback.


Related issues 1 (1 open0 closed)

Related to TYPO3 Core - Bug #72974: "Copy default content elements"-Button is shown even if an editor hasn't access to this CTypeNew2016-01-27

Actions
Actions #1

Updated by Riccardo De Contardi about 7 years ago

I can confirm it with 8.7-dev (latest master)

Steps to reproduce

1) create and editors group and an editor user that has it
2) editors group > explicit deny the "filelist" CType
3) with admin editor, create a page, translate it
4) create inside the page a "filelist" CE and fill it with one file
5) login as editor > try to translate the CE > the file gets duplicated.

Actions #2

Updated by Oliver Hader over 6 years ago

  • Category set to DataHandler aka TCEmain
  • Complexity set to medium
Actions #3

Updated by Riccardo De Contardi over 4 years ago

This issue still happens on 10.1.0-dev (latest master)

Actions #4

Updated by Riccardo De Contardi about 4 years ago

  • Parent task set to #90674
Actions #5

Updated by Riccardo De Contardi about 4 years ago

Still present on 10.4.0-dev (latest master)

Actions #6

Updated by Riccardo De Contardi 8 months ago

Still present on version 13.0.0-dev

Actions #7

Updated by Riccardo De Contardi 9 days ago

Still present on version 13.1.0-dev

Actions

Also available in: Atom PDF